Privacy policy.

What we collect

The information we hold.

When you book with us, we collect only what we need to provide your treatment:

1. Your name, phone number and email address, so we can identify your booking and contact you about it.
2. The service(s) you book, your chosen artist, and the date and time of your appointment.
3. Any notes you add to a booking — including anything you tell us about allergies or sensitivities, so our team can keep you safe during your treatment.
4. Basic technical information (such as your approximate location and device) that our hosting provider records to keep the site secure and working.

Why we use it

How your data is used.

Our lawful basis is the performance of your booking and our legitimate interest in running the salon. We use your information to:

1. To take, confirm and manage your appointment, and to contact you if anything about it changes.
2. To send you a booking confirmation by email, and to let the salon know a booking has come in.
3. To keep a record of your visits so we can give you a better service when you return.
4. To protect the salon and our customers — for example, preventing fraudulent or spam bookings.

Who can see it

Who we share with.

Your data is only ever shared with the trusted providers that help us run the booking service, all bound to protect it:

1. Supabase — our secure database and hosting provider, where your booking details are stored.
2. Resend — the service that delivers your confirmation email and the salon's booking notification.
3. Vercel — the platform that hosts this website.
4. We never sell your data, and we never share it for marketing by third parties.

How long we keep it

Storage & retention.

We keep your booking records only for as long as needed to manage your appointments and our legitimate business records, after which they are deleted. You can ask us to remove your data sooner at any time.

Your rights

What you can ask for.

Under UK data-protection law you have the right to:

1. Ask us for a copy of the personal data we hold about you.
2. Ask us to correct anything that is wrong.
3. Ask us to delete your data (“the right to erasure”) — we will remove your booking records unless we are legally required to keep them.
4. Object to, or ask us to restrict, how we use your data.